We keep getting this virus from these guys. Our internal tracking system has located them in Gaggenau Germany and also found the site that this virus originated from this website http://www.dangerousmedia.com
The virus is a password stealer, and its a tough virus to detect. So far we found that http://www.kaspersky.com/downloads is the only anti-virus program that can see and delete it.